Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File:                     CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier:          DZdc/sC26FAqKKvCFnyEo8M6ORENl5zoI/WDwpvK/GM=
Subject key identifier:   4E:30:7F:48:CD:AF:3C:46:AE:42:C1:52:D2:91:5C:32:9C:0D:6D:E4
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer:       /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number:          0287
Signing time:             Sun 01 Mar 2026 02:36:55 +0000
Manifest this update:     Sun 01 Mar 2026 02:36:55 +0000
Manifest next update:     Sun 08 Mar 2026 02:36:55 +0000
Files and hashes:         1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: lLl+6dE6/h7y3q+kB5CpqSssMWcFy7t/cIXGMxGXsJU=)
                          2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: 3HprGBGXL4EayyIcLo0mV4xO7Cbk7r9fm60rm3YtYJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
                          rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
        Validity
            Not Before: Mar  1 02:36:55 2026 GMT
            Not After : Mar  8 02:36:55 2026 GMT
        Subject: CN=69a3a647-a642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:2e:31:aa:63:4d:68:8b:ff:c9:9c:51:cf:
                    d9:0d:68:51:e4:45:47:4c:cf:d2:de:6f:31:39:6a:
                    d0:c2:71:0e:a0:ef:b1:cc:6d:7c:3e:b8:49:61:2a:
                    87:42:a6:59:92:d6:41:25:ea:8d:41:d2:ac:bf:17:
                    08:76:ae:a1:8c:91:ea:87:7c:36:1d:c9:76:7c:7d:
                    56:bb:e5:aa:b2:5a:55:bd:d3:13:6a:1c:7e:cc:09:
                    41:10:f1:1d:41:0b:4f:2a:4a:dc:bf:6f:2f:e0:33:
                    f0:36:e8:2d:19:e3:7b:4b:88:c7:27:38:0f:6d:ef:
                    4b:7c:ba:a8:76:5f:f2:4f:85:5d:6f:2c:7f:22:17:
                    41:de:09:04:56:d7:e1:31:b8:a6:0e:69:af:0d:a6:
                    2e:b8:7f:59:f0:90:75:a1:d7:61:47:0f:d0:80:7b:
                    f0:9a:ec:09:e9:ec:e6:ce:96:9d:9b:4c:02:fd:e9:
                    a1:32:15:0c:c0:5a:e1:15:34:0e:49:4b:ff:32:a9:
                    0b:63:86:15:32:6a:b9:08:41:d3:17:a2:04:49:0e:
                    77:d6:ea:a7:a0:8e:0c:f5:b0:c0:0c:2b:70:7f:cf:
                    79:b7:d4:35:4f:79:48:7c:a8:7b:ae:9a:a8:2d:2e:
                    fa:75:3c:ca:03:fd:91:51:22:d0:c1:c8:63:69:eb:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:7F:48:CD:AF:3C:46:AE:42:C1:52:D2:91:5C:32:9C:0D:6D:E4
            X509v3 Authority Key Identifier:
                keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:62:00:46:c4:21:1b:da:2d:bd:c4:15:6a:93:f6:01:07:8b:
         3b:09:2b:d9:a0:10:ed:96:c7:3d:3c:91:e3:51:75:dc:5e:65:
         70:2b:df:52:b7:95:48:17:99:11:5b:6a:7c:61:7e:ce:69:3f:
         7a:dc:d7:52:ab:57:83:f3:b5:34:c0:d8:c6:c5:39:a0:97:70:
         55:c9:48:5b:b1:b0:14:88:94:fd:e4:9d:cb:54:62:eb:94:e1:
         e2:f2:38:1f:74:fb:f1:dd:8e:d2:80:0f:13:fd:b5:17:6d:16:
         e1:60:2c:f0:be:d9:a9:47:04:ea:ce:4a:fd:97:c2:ca:e3:7c:
         9d:c6:85:dd:f6:6c:85:19:33:74:d6:fb:f6:97:d6:ca:5d:3f:
         95:8a:1c:dc:d8:ce:44:fc:ca:a2:54:db:15:18:cc:bd:0f:01:
         02:38:59:40:90:57:c6:3e:c5:74:f9:3d:de:5c:17:c0:0e:5b:
         3a:da:4f:22:47:e5:df:74:8e:81:80:0f:5b:33:e2:81:ba:ec:
         23:2c:4b:0f:41:cb:b4:94:29:c6:6b:5e:9a:81:d4:64:4c:34:
         e7:72:1f:b8:5f:9a:85:1b:d8:15:58:2b:c8:2c:44:e1:3b:b5:
         5a:38:a6:70:6b:e8:f5:e7:dd:ef:88:52:cb:3e:8a:3f:11:a7:
         a3:79:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:13 2026 by rpki-client